Worth clarifying that we don't do any of this - we absolutely don't scrape the data of your 1st degree connections or anyone else; only leads that you explicitly query.
Email addresses are then verified using sources in the public domain.
I agree that this is all certainly worth emphasising further and I think we could do with further clarification points in the FAQs.
Finally, we originally built this as an internal tool, but decided to wrap it up as a public facing one.